CVE-2001-1454

CVE-2001-1454 : Buffer overflow in MySQL before 3.23.33 allows remote execution of arbitrary code via a long DROP DATABASE request. Affected: MySQL up to 3.23.32. Impact per documents: remote code execution with arbitrary code. Remediation noted in public sources: upgrade to 3.23.33 or later. Oth...

CVE-2001-1445

The CVE-2001-1445 entry relates to Lotus Domino's SMTP server versions 5.0–5.7, where remote attackers could bypass mail relaying restrictions by crafting RCPT TO commands. The available sources describe the vulnerability as an unknown issue with relaying control, without detailing the root cause...

CVE-2001-1444

The CVE-2001-1444 issue concerns the Kerberos Telnet protocol as implemented by KTH Kerberos IV and Kerberos V (Heimdal). The vulnerability arises because the server-sent authentication and encryption options are not encrypted, enabling a man-in-the-middle to downgrade authentication and encrypti...

CVE-2001-1470

The CVE-2001-1470 entry describes a vulnerability in the IDEA cipher as implemented by SSH1. The issue is that the final block is not protected against modification, allowing a remote attacker to alter the message and adjust its CRC to match the changes, without detection. The descriptions across...

CVE-2001-1438

The CVE-2001-1438 entry concerns Handspring Visor devices (version 1.0 and 1.0.1) with the VisorPhone Springboard module installed. The vulnerability arises from handling of a large or crafted SMS image, allowing remote attackers to cause a PalmOS crash and VisorPhone database corruption (denial ...

CVE-2001-1441

CVE-2001-1441 describes a cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional . The issue allows remote attackers to trigger JavaScript in other clients by crafting a URL that injects a script into the resulting error message. According to the NVD entry, the vulnerabil...

CVE-2001-1456

The CVE-2001-1456 issue concerns Gauntlet Firewall versions 5.0–6.0, where a buffer overflow in the (1) smap/smapd and (2) CSMAP daemons allows remote attackers to execute arbitrary code via a crafted mail message. The root cause is a buffer overflow in the handling of mail content by these daemo...

CVE-2001-1443

CVE-2001-1443 affects KTH Kerberos IV and Kerberos V (Heimdal) used by Telnet clients. The root cause is that the Telnet connection is not encrypted when the server does not support the requested encryption, enabling a man-in-the-middle to read communications. The NVD entry lists a CVSS v2 base s...

CVE-2001-1461

CVE-2001-1461 is a directory traversal vulnerability in the WebID component of RSA Security SecurID 5.0, used by ACE/Agent on Windows, Windows NT and Windows 2000. The root cause is improper handling of URL-encoded sequences ("/.." and ".."), allowing an attacker to access restricted resources. T...

CVE-2001-1475

SSH before 2.0, when using RC4 and password authentication, is vulnerable to replaying messages until a new server key is generated. The affected component is the SSH protocol implementation prior to 2.0, with the underlying issue arising from RC4-based session handling that allows remote attacke...

CVE-2001-1447

CVE-2001-1447 involves NetInfo Manager on Mac OS X 10.0–10.1. The vulnerability allows a local user to obtain root privileges by launching applications through the (1) recent items and (2) services menus, which causes those applications to run with root privileges. The provided documents do not i...

CVE-2001-1471

CVE-2001-1471 affects phpBB versions 1.4.0 and earlier. The root cause is an invalid language value in prefs.php (and related auth.php handling) that can let a remote authenticated user modify variables (e.g., $l_statsblock, $l_privnotify) and later use them in an eval, enabling arbitrary PHP cod...

CVE-2001-1440

CVE-2001-1440 affects AIX 5.1L login when using loadable authentication modules; exact root cause is not publicly detailed in the provided documents. The vulnerability is described as enabling remote attackers to gain access to the system. CVSS data from NVD lists a base score of 10.0 (HIGH) with...

CVE-2001-1448

CVE-2001-1448 affects Magic eDeveloper Enterprise Edition 8.30-5 and earlier. The vulnerability arises from local file overwrites and potential code execution via a symlink attack on temporary files created by the scripts (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc. The described impact is l...

CVE-2001-1468

MODE C CVE-2001-1468 describes a PHP remote file inclusion in phpSecurePages where checklogin.php (and related components) allows arbitrary code execution if an attacker modifies the cfgProgDir parameter to reference a URL on a remote server. Connected advisories reiterate a code-execution vulner...

CVE-2001-1442

CVE-2001-1442 affects ISC InterNetNews (INN) via a buffer overflow in innfeed prior to 2.3.0. Local users in the news group can gain privileges through a long -c argument. Reports across CVE listings confirm the impact but no public exploitation details or patches are included in the provided doc...

CVE-2001-1446

CVE-2001-1446 is an information-disclosure issue in Mac OS X Finder: Finder-created hidden files (.FBCIndex and .DS_Store) in directories viewed or served by Apache can reveal directory contents. OpenVAS entries describe .FBCIndex exposing file contents (including HTML, JavaScript, passwords, or ...

CVE-2001-1437

Technical details about CVE-2001-1437 are not publicly available in the provided documents; monitor for updates.

CVE-2001-1458

Novell GroupWise WebAcc is affected by a directory traversal vulnerability that enables an attacker to read arbitrary files via a crafted request to /servlet/webacc?User.html= containing "../" sequences and a null character. The OpenVAS content disclosure note confirms the WebAcc Servlet exposes ...

CVE-2001-1463

The CVE-2001-1463 vulnerability affects RhinoSoft Serv-U 3.0: the remote administration client transmits the user password in plaintext even when S/KEY One-Time Password (OTP) is enabled, enabling an attacker to sniff credentials over the network. The issue is a plaintext password exposure in the...